Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6jki5JQbyvWqiUpjc9SDL2LLqYKiQ8h3SBUuty4LckRJ/0/3133382e39392e3136342e302f32322d3232203d3e20323634323131.roa
File:                     3133382e39392e3136342e302f32322d3232203d3e20323634323131.roa (raw, json)
Hash identifier:          iUjYd25klOCHPCZbpHDkEd5eYlwVMmOxMFQf0M8j77Q=
Subject key identifier:   E6:57:9D:F2:13:56:80:34:4E:F8:5B:5D:32:32:C0:9C:A6:F6:AB:0C
Certificate issuer:       /CN=916B2689E54D248C6020BC30FDA122F25B14FE87
Certificate serial:       55495C791A29FF4BAA087C5FEE5354B2B57DEBFF
Authority key identifier: 91:6B:26:89:E5:4D:24:8C:60:20:BC:30:FD:A1:22:F2:5B:14:FE:87
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/916B2689E54D248C6020BC30FDA122F25B14FE87.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6jki5JQbyvWqiUpjc9SDL2LLqYKiQ8h3SBUuty4LckRJ/0/3133382e39392e3136342e302f32322d3232203d3e20323634323131.roa
Signing time:             Sun 08 Sep 2024 17:08:04 +0000
ROA not before:           Sun 08 Sep 2024 17:03:04 +0000
ROA not after:            Sun 07 Sep 2025 17:08:04 +0000
asID:                     264211
IP address blocks:        138.99.164.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6jki5JQbyvWqiUpjc9SDL2LLqYKiQ8h3SBUuty4LckRJ/0/916B2689E54D248C6020BC30FDA122F25B14FE87.crl
                          rsync://rpki-repo.registro.br/repo/6jki5JQbyvWqiUpjc9SDL2LLqYKiQ8h3SBUuty4LckRJ/0/916B2689E54D248C6020BC30FDA122F25B14FE87.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/916B2689E54D248C6020BC30FDA122F25B14FE87.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 15:58:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:49:5c:79:1a:29:ff:4b:aa:08:7c:5f:ee:53:54:b2:b5:7d:eb:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=916B2689E54D248C6020BC30FDA122F25B14FE87
        Validity
            Not Before: Sep  8 17:03:04 2024 GMT
            Not After : Sep  7 17:08:04 2025 GMT
        Subject: CN=E6579DF2135680344EF85B5D3232C09CA6F6AB0C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:f4:66:b2:0c:90:bd:51:5c:66:ad:20:93:7e:
                    0d:79:fe:c2:1f:4e:55:ff:82:52:f5:02:ed:53:34:
                    55:63:7c:e8:06:1a:bd:9c:f0:cf:a9:c5:c8:5b:7a:
                    99:4c:2c:14:93:91:6a:d9:ff:28:a6:df:fc:6f:da:
                    05:c6:d7:6e:6f:39:37:ed:22:aa:5c:16:74:c5:e2:
                    33:d1:d5:5e:2c:35:05:6c:30:1a:0b:f4:77:6e:5b:
                    45:67:24:fc:7f:99:f0:4e:49:de:e5:fd:d4:55:4c:
                    c1:ca:ed:85:e6:91:af:57:18:d5:85:71:66:4f:51:
                    96:ab:42:b2:be:2d:6f:1c:f0:90:6d:5b:c4:b2:26:
                    ba:b2:1c:df:4f:c7:75:c6:03:85:fb:3b:bd:a3:7a:
                    7f:87:7e:7b:b6:58:d9:0c:02:71:51:17:13:a3:37:
                    7e:90:58:bf:56:47:c2:1f:fc:cb:53:da:e9:53:97:
                    23:f5:9d:7a:b0:00:91:ca:44:30:ed:41:a6:02:64:
                    01:49:ad:eb:32:77:a0:f9:f4:99:f0:dc:65:34:8f:
                    d9:12:26:3a:3e:0f:ef:26:39:1a:c8:35:f1:0c:5a:
                    72:d9:a8:52:6f:fe:97:69:c6:27:f2:8c:7b:8e:05:
                    f1:f3:c3:17:76:d7:4c:19:14:f1:75:31:6d:bb:3c:
                    ca:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:57:9D:F2:13:56:80:34:4E:F8:5B:5D:32:32:C0:9C:A6:F6:AB:0C
            X509v3 Authority Key Identifier:
                keyid:91:6B:26:89:E5:4D:24:8C:60:20:BC:30:FD:A1:22:F2:5B:14:FE:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6jki5JQbyvWqiUpjc9SDL2LLqYKiQ8h3SBUuty4LckRJ/0/916B2689E54D248C6020BC30FDA122F25B14FE87.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/916B2689E54D248C6020BC30FDA122F25B14FE87.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6jki5JQbyvWqiUpjc9SDL2LLqYKiQ8h3SBUuty4LckRJ/0/3133382e39392e3136342e302f32322d3232203d3e20323634323131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.99.164.0/22

    Signature Algorithm: sha256WithRSAEncryption
         46:3d:db:97:4f:db:26:be:57:b4:e8:07:2b:4e:f7:1f:66:98:
         2c:72:0b:57:3a:bf:2e:49:a0:af:59:be:11:50:cb:cd:9d:16:
         05:65:d6:96:be:9b:10:19:5c:c2:88:87:56:92:e8:c6:07:5e:
         f6:5d:07:7f:c8:c0:9c:2c:d3:23:cc:25:bf:6a:ce:0e:36:73:
         24:7d:f9:63:16:de:1e:84:70:d7:f8:c3:1d:ca:4c:61:c7:71:
         e0:7c:43:51:84:3f:bf:f6:f9:24:e6:64:ed:c6:b2:de:be:d5:
         73:1c:39:d3:5f:d1:3e:85:ec:0d:46:9e:13:61:e3:d9:92:e0:
         64:b9:e2:bd:d7:c0:97:88:e7:c3:1d:e1:b0:f4:41:04:9f:ba:
         34:95:48:65:48:8b:e6:fe:6d:71:46:18:70:75:29:14:4d:17:
         85:74:e6:fd:97:43:af:02:e9:8f:7e:32:21:cf:84:b4:52:a0:
         8c:a1:35:96:ad:20:a1:a5:19:67:c1:d5:49:1c:ab:26:29:f4:
         3a:2a:af:48:df:38:cd:d8:8a:7e:e9:35:84:ad:11:c1:45:0c:
         ae:64:82:09:5b:c3:8b:e1:73:16:e0:a7:d4:bb:71:bb:6a:ae:
         e8:8f:6f:91:26:56:62:7e:17:f1:25:98:1c:f7:a6:14:9e:24:
         45:d7:6d:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 14:19:36 2024 by rpki-client on console-ams.rpki-client.org